$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd28d837-6ba3-38c2-bf39-5f7f3b09d88c.roa File: bd28d837-6ba3-38c2-bf39-5f7f3b09d88c.roa (raw, json) Hash identifier: sNQpdUykkPJmbppsPVBO0SKcWPWhz2dbghMN0G77dZI= Subject key identifier: A1:C9:C6:60:A8:E0:AA:C8:95:14:AA:96:51:06:5B:F4:C3:83:50:12 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5C6CB49D0D2A9B285A8FAC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd28d837-6ba3-38c2-bf39-5f7f3b09d88c.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19527 IP address blocks: 34.2.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b4:9d:0d:2a:9b:28:5a:8f:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=4cac8cfc-a4fd-4422-b411-445ec41bd9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:f5:78:40:b8:74:fb:c2:6e:76:b5:e8:bc: 81:74:d1:21:70:ef:11:4e:2d:c7:58:4a:c4:ab:37: a8:b4:58:9b:e9:d7:fd:68:d4:df:1d:0e:09:4d:f6: d9:14:95:8f:c4:8a:79:e4:03:ce:11:d4:58:46:d6: f9:8a:7e:2c:f7:79:1a:9a:77:0b:b4:94:68:d1:42: 1d:c4:68:35:f0:40:b8:b9:dd:cb:eb:28:22:24:db: 72:39:36:02:05:52:f1:84:34:83:9d:0a:62:93:61: 22:1f:90:b9:2b:bc:7f:5a:32:af:69:1e:c9:c8:64: d4:6d:b2:bc:66:20:38:82:27:07:1f:ed:98:8e:6c: c1:34:33:83:b6:50:0b:9c:a8:df:13:d8:18:ec:ee: 56:54:6b:29:3f:96:98:38:1a:fa:82:dc:28:4e:57: d3:8c:e6:67:bf:62:9b:80:63:d0:94:1d:3a:3d:d1: 9b:13:8f:e5:65:a6:90:18:d5:de:53:7e:c0:31:76: 79:cf:c3:bd:6d:02:ef:42:3f:34:cb:07:45:d5:a5: 7a:6c:fc:df:0e:5d:03:ca:c7:32:37:e4:5b:3b:43: 53:c9:35:77:c6:60:88:29:28:17:6c:33:03:dc:94: 26:c6:1d:68:10:30:df:a2:a4:41:4e:cc:89:ed:6f: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:C6:60:A8:E0:AA:C8:95:14:AA:96:51:06:5B:F4:C3:83:50:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd28d837-6ba3-38c2-bf39-5f7f3b09d88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e9:5f:92:6a:92:cf:00:12:0c:ba:9d:ac:a7:51:43:6b:1c: 5e:22:9b:e2:f0:c2:de:3b:a0:1c:97:a4:92:67:5e:ff:16:82: a0:29:37:1d:79:34:d9:63:0c:62:1b:8d:03:bc:f5:25:b0:78: 44:99:2a:97:8d:3f:81:10:95:30:e3:5b:42:42:46:0d:33:b4: 80:48:55:9e:e4:a1:bd:9c:a7:5c:4f:be:b8:ed:c9:82:a9:38: f5:1c:e2:1f:ac:66:50:86:ec:eb:1f:21:5b:1c:f5:2f:5f:c0: c4:6e:49:27:e7:df:3c:bc:db:f9:df:90:58:80:4a:2c:1d:bb: 5e:cf:83:57:e5:c1:20:ce:54:7a:a5:17:f9:9b:1d:44:21:67: 73:cd:a2:44:1c:7f:57:6a:80:94:5b:ed:50:89:f8:dd:0b:42: 28:ca:02:05:0c:d7:67:1a:26:3e:65:fa:00:fe:5d:d6:38:f5: 1d:22:ee:c5:28:a6:e7:1a:82:2a:95:a4:6a:90:7b:07:58:63: 9b:35:7e:b5:8a:cf:30:4a:10:5d:dc:63:34:d8:94:c5:d7:c2: 46:72:36:01:17:c1:8f:95:36:4f:91:0a:2c:c5:93:35:69:35: cc:02:b5:1b:97:e4:2b:1f:d7:2c:6b:7d:7b:e8:0e:93:47:59: 31:25:01:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLSdDSqbKFqPrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NGNhYzhjZmMtYTRmZC00NDIyLWI0MTEtNDQ1ZWM0MWJkOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4b1eEC4dPvCbna16LyBdNEhcO8RTi3HWErE qzeotFib6df9aNTfHQ4JTfbZFJWPxIp55APOEdRYRtb5in4s93kamncLtJRo0UId xGg18EC4ud3L6ygiJNtyOTYCBVLxhDSDnQpik2EiH5C5K7x/WjKvaR7JyGTUbbK8 ZiA4gicHH+2YjmzBNDODtlALnKjfE9gY7O5WVGspP5aYOBr6gtwoTlfTjOZnv2Kb gGPQlB06PdGbE4/lZaaQGNXeU37AMXZ5z8O9bQLvQj80ywdF1aV6bPzfDl0Dyscy N+RbO0NTyTV3xmCIKSgXbDMD3JQmxh1oEDDfoqRBTsyJ7W+wtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHJxmCo4KrIlRSqllEGW/TDg1ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQyOGQ4MzctNmJhMy0z OGMyLWJmMzktNWY3ZjNiMDlkODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTpX5Jqks8AEgy6naynUUNrHF4im+Lwwt47oByXpJJnXv8WgqApNx15 NNljDGIbjQO89SWweESZKpeNP4EQlTDjW0JCRg0ztIBIVZ7kob2cp1xPvrjtyYKp OPUc4h+sZlCG7OsfIVsc9S9fwMRuSSfn3zy82/nfkFiASiwdu17Pg1flwSDOVHql F/mbHUQhZ3PNokQcf1dqgJRb7VCJ+N0LQijKAgUM12caJj5l+gD+XdY49R0i7sUo pucagiqVpGqQewdYY5s1frWKzzBKEF3cYzTYlMXXwkZyNgEXwY+VNk+RCizFkzVp NcwCtRuX5Csf1yxrfXvoDpNHWTElAa4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:01 2025 by rpki-client